Strong practical application security experience at architecture and system level: threat modeling, authentication, authorization, session management, API security, secure design, secrets handling, business logic abuse, and secure SDLC. Work directly with engineering and Dev Ops teams to identify, p